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IN THE CLAIMS: 

Status of the claims: 

Claims 1-13, 17-29, 33-45, 49 and 50 are currently pending in this application. 
Claims 1, 17, 33 and 49 are currently amended; 
Claims 3-5, 7-9, 19-21, 23-25, 29, 35-37, and 39-40 are original; 
Claims 1, 2, 6, 10-13, 17, 18, 22, 26-28, 33, 34, 38, 41-45, 49 and 50 are previously 
presented. 

Complete listing of the claims : 

1 . (Currently amended) A method for generating identification data, comprising 
the steps of: 

providing an ATM PIN related to a first transaction type that is an ATM transaction; 

and 

performing a cryptographic operation upon the ATM PIN, thereby generating a non- 
ATM electronic commerce PIN based on said ATM PI N, said non-ATM electronic 
commerce PIN to be entered by a user for use in a second transaction type that is a non-ATM 
financial transaction. 

2. (Previously presented) A method according to claim 1, wherein the step of 
performing a cryptographic operation comprises: 

providing a conversion key; and 

using the conversion key to perform said cryptographic operation upon the ATM PIN. 

3. (Original) A method according to claim 2, wherein the step of providing a 
conversion key comprises: 

providing conversion key derivation data; 
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providing a conversion key derivation key; and 

performing a cryptographic operation upon the conversion key derivation data and the 
conversion key derivation key. 

4. (Original) A method according to claim 3, wherein the step of performing a 
cryptographic operation upon the conversion key derivation data and the conversion key 
derivation key comprises using the conversion key derivation key to perform at least one 
cryptographic operation upon the conversion key derivation data. 

5. (Original) A method according to claim 4, wherein the conversion key 
derivation data includes an identification number that is associated with multiple accounts, 
and wherein at least one cryptographic operation using a secret key is performed to 
cryptographically process said conversion key derivation data to produce the conversion key. 

6. (Previously presented) A method according to claim 1, wherein the step of 
performing a cryptographic operation comprises: 

providing cryptographically-computed data; and 

performing an operation upon the ATM PIN and the cryptographically-computed 

data. 

7. (Original) A method according to claim 6, wherein the step of providing 
cryptographically- computed data comprises: 

providing initial data; and 

performing at least one cryptographic operation using a secret key upon the initial 
data, thereby producing the cryptographically-computed data. 

8. (Original) A method according to claim 7, wherein said at least one 
cryptographic operation using a secret key comprises at least one of a DES-encryption and a 
DES-decryption. 
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9. (Original) A method according to claim 8, wherein at least a portion of the 
initial data is obtained from at least a portion of an account number. 

10. (Previously presented) A method according to claim 9, wherein the operation 
upon the ATM PIN and the cryptographically-computed data comprises either a subtraction 
operation or an addition operation. 

1 1 . (Previously presented) A method according to claim 10, wherein the step of 
providing cryptographically-computed data further comprises generating a 
cryptographically-computed number having a base corresponding to a base of a number 
representing the ATM PIN, wherein said cryptographically-computed number has a number 
of digits corresponding to a number of digits of said number representing the ATM PIN. 

12. (Previously presented) A method according to claim 6, wherein the step of 
providing cryptographically-computed data comprises generating a 
cryptographically-computed number having a base corresponding to a base of a number 
representing the ATM PIN, wherein said cryptographically-computed number has a number 
of digits corresponding to a number of digits of said number representing the ATM PIN. 

13. (Previously presented) A method according to claim 6, wherein the operation 
upon the ATM PIN and the cryptographically-computed data comprises either a subtraction 
operation or an addition operation. 

17. (Currently amended) A system for generating identification data, comprising: 
a memory for storing an ATM PEN; and 

a processor for performing a cryptographic operation upon the ATM PIN, such that 
said processor generates a second non-ATM PIN related to a non-ATM electronic transaction 
during which transaction a user enters said second non-ATM PIN . 
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18. (Previously presented) The system of claim 17, wherein the memory includes 
means for storing a conversion key, and wherein the processor comprises means for using the 
conversion key to perform a cryptographic operation upon the ATM PIN. 

19. (Original) The system of claim 18, wherein the memory further includes: 
means for storing conversion key derivation data; and 

means for storing a conversion key derivation key; and 

wherein the processor comprises means to perform a cryptographic operation upon 
the conversion key derivation data and the conversion key derivation key, thereby generating 
the conversion key. 

20. (Original) The system of claim 19, wherein the cryptographic operation upon 
the conversion key derivation data and the conversion key derivation key comprises at least 
one DES operation. 

21. (Original) The system of claim 20, wherein the conversion key derivation 
data is derived from an identification number, and wherein said at least one DES operation 
comprises: 

using a portion of the conversion key derivation key to DES-encrypt the conversion 
key derivation data, thereby producing a first conversion key generation result; 

using a portion of the conversion key derivation key to DES-decrypt the first 
conversion key generation result, thereby producing a second conversion key generation 
result; 

using a portion of the conversion key derivation key to DES-encrypt the second 
conversion key generation result, thereby producing a third conversion key generation result; 
using the third conversion key generation result as a first portion of the conversion 

key; 
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using a portion of the conversion key derivation key to DES-encrypt the third 
conversion key generation result, thereby producing a fourth conversion key generation 
result; 

using a portion of the conversion key derivation key to DES-decrypt the fourth 
conversion key generation result, thereby producing a fifth conversion key generation result; 

using a portion of the conversion key derivation key to DES-encrypt the fifth 
conversion key generation result, thereby producing a sixth conversion key generation result; 
and 

using the sixth conversion key generation result as a second portion of the conversion 

key. 

22. (Previously presented) The system of claim 17, wherein the memory includes 
means for storing cryptographically-computed data, and wherein the processor comprises: 

means for generating the cryptographically-computed data; and 
means for performing an operation upon the ATM PIN and the 
cryptographically-computed data. 

23. (Original) The system of claim 22, wherein the memory further includes 
means for storing initial data, and wherein the means for generating the 
cryptographically-computed data comprises means for performing at least one cryptographic 
operation upon the initial data, thereby producing the cryptographically-computed data. 

24. (Original) The system of claim 23, wherein said at least one cryptographic 
operation comprises at least one of a DES-encryption and a DES-decryption. 

25. (Original) The system of claim 24, wherein the initial data is obtained from 
an account number, wherein the memory further includes means for storing a conversion key, 
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and wherein the cryptographic operation uses the initial data and the conversion key to 
produce the cryptographically-computed data. 

26. (Previously presented) The system of claim 25, wherein the means for 
performing an operation upon the ATM PIN and the cryptographically-computed data 
comprises either a subtraction means or an addition means. 

27. (Previously presented) The system of claim 25, wherein the means for 
performing an operation further comprises means for generating a 
cryptographically-computed number having a base corresponding to a base of a number 
representing the ATM PEN, wherein said cryptographically-computed number has a number 
of digits corresponding to a number of digits of said number representing the ATM PIN. 

28. (Previously presented) The system of claim 22, wherein the means for 
performing an operation comprises means for generating a cryptographically-computed 
number having a base corresponding to a base of a number representing ATM PIN, wherein 
said cryptographically-computed number has a number of digits corresponding to a number 
of digits of said number representing the ATM PIN. 

29. (Original) The system of claim 22, wherein the means for performing an 
operation comprises either a subtraction means or an addition means. 
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33. (Currently amended) A system for generating identification data, comprising: 
a memory; 

a processor in communication with the memory; and 

a computer-readable medium in communication with the processor and storing 
instructions which, when executed, cause the processor to perform the steps of: 

storing an ATM PIN in the memory, said first set being related to a first 
transaction type; and 

performing a cryptographic operation upon the ATM PEN, thereby generating 
a second PIN r e lat e d to be entered by a user during a non-ATM electronic transaction. 

34. (Previously presented) The system of claim 33, wherein the step of 
performing a cryptographic operation comprises: 

providing a conversion key; 

storing the conversion key in the memory; and 

using the conversion key to perform said cryptographic operation upon the ATM PIN. 

35. (Original) The system of claim 34, wherein the step of providing a conversion 
key comprises: 

storing conversion key derivation data in the memory; 
storing a conversion key derivation key in the memory; and 

performing a cryptographic operation upon the conversion key derivation data and the 
conversion key derivation key. 

36. (Original) The system of claim 35, wherein the step of performing a 
cryptographic operation upon the conversion key derivation data and the conversion key 
derivation key comprises using the conversion key derivation key to perform at least one 
DES operation upon the conversion key derivation data. 
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37. (Original) The system of claim 36, wherein the conversion key derivation 
data is derived from an identification number, and wherein said at least one DES operation 
comprises: 

using a portion of the conversion key derivation key to DES-encrypt the conversion 
key derivation data, thereby producing a first conversion key generation result; 

using a portion of the conversion key derivation key to DES-decrypt the first 
conversion key generation result, thereby producing a second conversion key generation 
result; 

using a portion of the conversion key derivation key to DES-encrypt the second 
conversion key generation result, thereby producing a third conversion key generation result; 
using the third conversion key generation result as a first portion of the conversion 

key; 

using a portion of the conversion key derivation key to DES-encrypt the third 
conversion key generation result, thereby producing a fourth conversion key generation 
result; 

using a portion of the conversion key derivation key to DES-decrypt the fourth 
conversion key generation result, thereby producing a fifth conversion key generation result; 

using a portion of the conversion key derivation key to DES-encrypt the fifth 
conversion key generation result, thereby producing a sixth conversion key generation result; 
and 

using the sixth conversion key generation result as a second portion of the conversion 

key. 

38. (Previously presented) The system of claim 33, wherein the step of 
performing a cryptographic operation comprises: 

providing cryptographically-computed data; 

storing the cryptographically-computed data in the memory; and 
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performing an operation upon the ATM PIN and the cryptographically-computed 

data. 

39. (Original) The system of claim 38, wherein the step of providing 
cryptographically-computed data comprises: 

storing initial data in the memory; and 

performing at least one cryptographic operation using a secret key upon the initial 
data, -thereby producing the cryptographically-computed data. 

40. (Original) The system of claim 39, wherein said at least one cryptographic 
operation using a secret key comprises at least one of a DES-encryption and a 
DES-decryption. 

41 . (Previously presented) The system of claim 40, wherein at least a portion of 
the initial data is obtained from at least a portion of an account number. 

42. (Previously presented) The system of claim 41, wherein the operation upon 
the ATM PIN and the cryptographically-computed data comprises either a subtraction 
operation or an addition operation. 

43. (Previously presented) The system of claim 42, wherein the step of providing 
cryptographically-computed data further comprises generating a cryptographically-computed 
number having a base corresponding to a base of a number representing the ATM PIN, 
wherein said cryptographically-computed number has a number of digits corresponding to a 
number of digits of said number representing the ATM PIN. 

44. (Previously presented) The system of claim 38, wherein the step of providing 
cryptographically-computed data comprises generating a cryptographically-computed 
number having a base corresponding to a base of a number representing the ATM PIN, 
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wherein said cryptographically-computed number has a number of digits corresponding to a 
number of digits of said number representing ATM PIN. 

45. (Previously presented) The system of claim 38, wherein the operation upon 
the ATM PIN and the cryptographically-computed data comprises either a subtraction 
operation or an addition operation. 

49. (Currently amended) A method for generating identification data for a non- 
ATM electronic financial transaction over a communications network, comprising the steps 
of: 

providing a first set of identification data related to a first transaction type; 

performing a cryptographic operation upon the first set of identification data 
to generate a second set of identification data for use in conducting said non-ATM electronic 
financial transaction, wherein said first set of identification data is an ATM PIN, said first 
transaction type is an ATM-transaction, said second set of identification data is a non-ATM 
electronic commerce PIN to be entered by a user in a non-ATM electronic financial 
transaction. i-and 

performing a s e cond cryptographic op e ration upon said non ATM e lectronic 

comm e rc e PIN to g e n e rat e said ATM PIN. 

50. (Previously presented) The method of claim 49, further comprising the step 

of: 

performing a second cryptographic operation upon said electronic commerce 
PIN to generate said ATM-PIN. 
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